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(54) INTEGRATION SYSTEM 

(57) Abstract: 

PROBLEM TO BE SOLVED: To provide an integration 
system that relates to an encryption technology as an 
information security technology, especially to a key 
common sharing, encryption and digital signature 
technology, integrates a factorization problem, a 
discrete logarithm problem, and a discrete logarithm 
problem on an elliptic curve having independent security 
in a way that the respective securities are independent, 
and can provide a key common share, encryption and 
signature method having immunity even when one 
problem is attacked. 

SOLUTION: The integration system adopts a key 
common sharing method that includes an initial setting 
step (1), a system parameter setting (1-1), a step (1-2) 
where a key for a user u1 is generated, a notice step 
(1-3) of key information for the user u1, a step (2) 
where a signature to data M by the user u1 is generated, 
and a step (3) where the signature to the data M by a 
user u2 is verified. Thus, this invention provides the 
key common share, encryption and signature method that 



has stiffness against an attack. 
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(54) HN90«ft] jfflS^lff 



(57) mm 

( 1 ) ttfflKS 

(i—i) isZT&s^t—pmfe 

(1—2) a~ful©iM 
(1—3) jl— tfu l(3DSI«fflflD®*fl 

(2) a-lfu lti*r-*M^OK4rt 

(3) J.— tfu 2(c c fc3:r-*M'\<DW£tfc!E 




(2) 
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[ttftttXaiEBfl] 

[mmm fi, F2&k*fcs«w£»3ft**iRB 

»kL, g 1, "g2*^ti-eti*K»F 1 , 

U gl, ff2ttfflR4^tl^ni 1, 12^U*o 

a.— tfu 1 ku2©«J«Sfl£fc*, -a-lfu mo<x 1 

<i lkftsfflsxitsatwryrt, 

x l£u l©«M6«k-U «axlWlt, ^Pgg£ 
Fl±7?yl=gr (xD'Mift^Tyrt, * 
«>&y l£&H«k.U fiiiyU^rA/^^- 
: *T?fc*«IB»F l , Tcgl, khri !fu2fc 
:7k , 3.-1f u 2 & 0 <x 2 < 1 2 k ft 
£fiSx2£.£^?:*;*7 i y:rk > &Slfcx2Su2 
. Q«&Stlk U 'KflMIx 2£#bT, ^P!S¥F 2±T-y 
2 = g2~ (x2) £##>3;*5ry:rh, 5Rg>fcy2* 
&gffittkU ^SBtty 2 kS^^A;^^ — 

2 , 2 , flSSl 2 £.3-— if u 1 iZMMt 
^yytfrbftt), a.— Ifu lk-3--tfu 2£<Dm&£ 
■;■ fcfcr , OL^-if u 1 0 <k 1 < 1 2 kft*&»k 1 
■filtS^r^rt, ■■ft«lfcfc l-*fflV>T, WPIPF 2 

^ r 1 &-tf u 2 ^ 7i: , jl— tf u 2 

Ii0<k2<l 1 kfcSftftk 2 ££/£-r 3*7^:7 
k, 4dtlfck2*fflW f *PBPFl±T-r 2 = gl 
(k2) SsfcafrS^yrk, ^(DlhtJr 2 £3.— tf 
ulCSimf^/^, ^-ifu lfc*aL-ifu2 <k 
*3§®bfer2ku2 O&IMfty 2 XlFE x 

K=(r2" (xl), y2" (kl)) = ( g r 
(xlxk2) , g2 A (klxx2) ) eFlxF2 

a.— tf-u 2 fcfca-r-tfu U OSilfcrUul <D&I3 
Sly lXva^DSSMix 22fctfa»k 2Sffltvt, 
K= (yl - (k2) , rT (x2) ) = (gl" 
(xlxk2) , g2~ (klxx2) ) eFlxF2 

JL— tf u 1 k^-ifu 2 ^^n^ticDvX^A/^^- 
*F1, gl, 11MF2, g2, 12§a^ic4^ 

xi, x2&ttm&M*£i*2>zt-cmK&mj'rzz 

[IfScJB 4 ] gfrftg 1 IBS0WPSPF 1 , F 2 £#PH<* 

tt z z t zftmttzm&mm. 

umm 5 ] mmn 1 tm^mmv 1 , f 2 

±04SRTOE1 (Fl) , E2 (F2) btZZtZ 



m&m 6 ] m&rn 1 mm^mmF 1 , f 2 ^^pi 

<*, .*|8fl:±(Z)flinffl»F 1, E2 (F2) ftZZt 

[W#SI7] Fl, F2£*BBgfkU gl, g2£^ 
fi^nWKPFl, F2<2>7tkU. gl, g2<Dffigfc£ 
*ft*ixll, 12kL, *ESF1, F2<3DSjfSk 
fc£*»AW:*u fKFl, F2CD7c&fijSJc:«|j| 
-?%>'%&&Z:tl*tl7Cl> 7r2kL, *fH»Fl, F 
2,7Cgl, g2, fflRll, 12SBftt^ : By3 
^U lfiSF l, F.24>7G£A#kU ^cdtt 1 , 

TV 2 \z£z&tt&mn*z>mn®*mL, ^-*f u i « 

0<x 1<1 lh^IfalM0<x2.<1.2i:^ 
Sffl»x2*fiMBIIkbTiatt'rs^ i e»JSSWL, «■ 

six uc^fbr, mmmF i±<Dmm?y i = g i " 

(xl) £3*#£§igSSk, Mix2CMbT, WRB 
8F.,2±<OSI»-ey2 = g2 ~ (x2) S*»S»Jf« . 

-eh^n©tia^jyl, y2*&M»kU &BS 
iyl , y 21«r^7^- ^-Vftd^ReF.!,. 
F 2 , >ng 1 , g 2 ; .im 1 1 1 2 , ^tt 1 , 7t 2 

xmrniz t-^m &mm u tc \ ^-im , o<ki<i 

!M0<k2<l 2k&5SWRkl; k-2*£ttb f 
^nSffitt-rs^^eUSS^fL, *IS»Fl±7?rl = 
g 1 " (k 1) , g 1 =y 1 - (k 1) $r, WH£¥F2 
±T- r 2 = g 2 ^ (k2) , c2 = y2" (k2) 
to, 

C=7Tl (Gl) ( + ) 7C2 (C2) ( + ) M 

^©ffi* (rl, r2, c) $r^~^ 
Mk:»-rSBS#XMkU, jL-tf u 1 tSSMf 
^L, WX Crl, r 2,. c) . ^gilfca- ifu 
1 li, Mx 1 , x 2 zm^x, 
M = tv 1 (rT (xl) ) ( + ) tt2 (r2^ (x 
2) ) (+) c 

L, If u 1 tfF 1 (CS^ < attm^^Mk F 2 teg 

fT^ck^®k-rsng^b^s. 

im$m i o ] $mm i mm<n^m&Y i , f 2 ^wpi 
* k ^> c k &^es k -r « «wb*a 

[H^JH 1 1 ] l»*3H 7 sBfi^^Pl^F 1 , F 2 £*PM 
»±©«P3ffl«El (Fl) , E2 (F2) k<T£Ck 

[gf^a 1 2 ] ffiftH 7 IBiEO^PS^F 1 , F 2 £WPI 
*, *H*±©*niffl«Fl f E2 (F2) klTSCk 



(3) 
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[Sf^JPI13] Fl, F2ft*IBSi:U gl, g2§ 

^n-e-n^PBfflfF i, f2co^^l, gi, g 2 atom 

ft^ft^ftl 1, 1 2£L, dCLT'l lhl 2(iSVXC 
tHSFl, F2cD»nt*fc4t:sia5»t:* 

l, wewfi, F2<z)7csa»(c«ai-r*i?«ft*ii 

■^tlTTl, tt2^L, ffi*©tTy h»©fi«©5cS*S 

WIBSFl, F2, Tcgl, g2, 1, 126« 

■IKtS^tijaiML, WKSF1, F2£)^ftA;trfc 

©try KScofi[a©7c*A*i:Li ^cDhfccfcSHJAft 
9m?*mW&£;GL, -a.— ifu lli0<x 1<1 1 1 
: ^51to lM0<x2<12 £ft3Sg&x2ft|&B 

T, WRS^F l±©»jrcy l = g 1 ~ (x 1) 

»S»x2t:*rur,- £IBSF:.2 .±<Z>S# 
1?y2 = g2~ (x2) ft#«>S8IW8Bft*f U ^ti^ 
> tiCDffi^jy 1 v y 2 ft£H«£ L, ,«y 1 , y 2 t 
^rA^7pi^f$,5WBSF 1, F 2 , TCg 1 , 
& 2 , ffiftl 1 , 12, 1 , 7t 2 , hftftkx— if 

^tr^f i**)lW%$:Ml,X2L—1?u 2lZj£mLtc^t 

0<kl<l lM0<k2<l 2fcft£flJSk 
1, k2^Ml, ctis«M»"rs^^eua*#L, ^ 

-*M£*fLe=h (M) ft;&#>, WI?SPFl±-erl 
= ff 1 ~ (kl) ft, ^EE!PF2i:T-r 2 = g2 ~ (k 
2) &tc\ c l=7r 1 (r l) (mod 1 

1) > c2=tt2 (r2). (mod 12) ft*#>, 
sl=kl" (-1) (e+xlcl) (mod 1 
1) 

s2=k2" (-1) (e+x2c2) (mod 1 

2) ..• 

i:^l>G<sl<ll-l, 0<s2<12~ 1 ft* 

■ 

0<s<l 1 xl 2^os = s 1 (mod 1 1) , 
s = s 2 (mod 12) 

£ft£sft*#>£«J¥3Sft;&L, *(D&±i (cl, c 
2, s) t^-^MfcJW *»*XturJ.— !fu2fc: 

iaai-r l, i*x.(ci, c2, s) ft§ 
**jBivr, 

e' =h (M) , 

sl'=s(mod 11), s2'=s (mod 1 
2) , 

FUtrl' =gr (e'/sl' ) yT (c 1 
/si) . 

F2±T-r2' =g2" (e , /s2 , )y2^ (c2 
/s2) , 

c 1' =tt1 (rl'), c2' = tt2 (r 2' ) 



ft*#)£g|||gB£:, 

01 = 01' (mod 1 1), 0 2 = 0 2' (mod 
12) 

«E-f3; ^-1ful^Fit*^<*|»flSBiHi : F 

2 < «^B«*««k:H#'**T**to8 f 

[»*3U 4] gf*JfU 3E«0**^JfiSarabfe» 
[11*9(15] S*JB1 3iB«©^&Hfr-r^^n^ 

[ W*B 1 6 J 1 3 12IKOWPSPF 1 i F 2 ft:# 

R#kt« cife^i: tsf : ■ 

[MXR 1 7 ]■'»*« 1 3-|Stt(D«rRB«F 1 , F 2 ft* ; 
Kff ±<Z)*HffljBE 1 (Fl) ; E2 (F2) 

[a«9(-i' a] m&m i 3mm<DmmmF 1 , f 2-** 

IS*, *E«Ut<Z)«mffi«Fl t E2 (F2) fcf*c: 
[000 1] 

;v**ft«Bfe: B8-T 3 * o T * 3 . 
[000 2] 

* -r c t & < as ftff * -5 & * . 
ttft^bfc*), *A^?*«c:fcftBE«9-r*afi^-e* 

*S<z>iH8ffl^ £ Sfg ft ft ft 001; ^ rT^ ft *«ftiB"e 

zb<D{zmw$m.mm&$>z. mmnmrsmizitim^ 

-f" (Neal Koblitz, " A Course 
inNumber theory and Cryp 
tography", Spinger-Verlag, 
1 9 8 7) £PL<»^£*ITM*. ^P3ffi^±Og|i^ 
^aP^Sft^T^M^-5. 

[0003] ttP3ffli8a±©Kts*n»Bgja 

E (Fp) S*K»Fp±€«*fifcfl|Rfflj|BEi:L f 
C<Oi:^, E©#^^>tlfe5cYic^tLT, 



(4) 
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Y = xG 

[0004] &,r^±mn^mm±<DmmMmpm^ 
tfcfc^J 1 

( 1 ) «9tHH5£ 

G, Mntt«0)7cE (F) ««RUfj6d««9ttft 

7T, .tt««©aaRft**H**iifc«*t9"r/>y^A 

.-MR* h k i-iTu 1 Y a = xaGi 

fffiHE/F, ^-^>hG, ^«7T t h^^A 

[0 0 0 5] (2) *y* r -VM\Ztt~?Z>^— tfu 1© 

1, e=h (M) StW-rs. 
2; j9JR0<k<"l.*^j«-r* o 

3. R 1 = k G, cl=7T (Rl) (mod q) , 

s = k- (— 1) (e +clxxa) (mod q) 
■■StUI-rS. ZZX-c l=0ft*V>tts = 0T-»n«* 
5— «, 2tcM^Tk£h>)irf . 

4. (cl, s) mi:ltM^t*i:Slt5o 

[0006] ( 3 ) w&mi 

1. e = h (M) £ft-»^3. 

2. cl = 0*^Mi s = 0^*n«, NG^to. 

3. RT = e/s G+ cl/s Y, 

C 1' =7T (R1* ) 

4.01 = 01' (mod q) tfeniiOKSffl^ 

[0007] ±mt&m it-&, -ocDjunaaa e 
ffl LTv^«*Rffll^E±©«^B»^»lOT^^^e s* 

/h*v^<p* unft^* 5 , /tt?feofct)&asi 

BEW WBfTJHT? fc % ft WfcfiHlW » 
[0 0 0 8] ftRfflacDSStS^^iffltftt, 
if, -o«H«i;MLfeyXfACDSiffiM 

A. Menezes, T. Okamoto and 

5. Vanstone, * 'Reducing ell 
iptic curve logarithmsto 
logarithms in a finite fi 
e Id' ' , IEEE Transactions o 



n Information Theory, 39 (1 
9 9 3), 1 6 3 9—1 6 4 6. 
T. Satoh and K. Araki, Fer 
mat quotients and the pol 
ynomial time discrete log 

algorithm for anomalous 
elliptic curve 5 * , Commen 
tarii Math. Univ. St. Paul 
i. , vol. 4 7 (1 9 8 8) , 8 1 — 9 2. 

[0009] mzmmfrtvmmmmmzmm ltcM 
( i ) *mm 

35it£xa, M^ya = g"xai:L, J.— tfu 2 

[oo i o] {2) m&m 

a.— tfu Ifcfc, . 

1. a«O<ka<q6£j0G-rSo 

2. ^PS«F±T-, ••' 
r 1 = g ~ k a 

£ftHL, u2(^fg-T^. ^-ifu2«, 

3. ty&0<kb<q£^iT£o 

4. #K#:F±*e, 
r 2=g"kb 

£ttnu uicain. 

5. gfgbfcr 2hu2 0^Hilybh 
xaiftkaSfflV^, #KftF±T, 

K= (r 2 A xa,y b ^ka) = (g~ (kbx x 
a) , g~ (kaxxb) ) e F x F 

6. ftfbfcrlkul©&BByaia»(Z)||««x 
bSLRkbftffl^T, *r«f*F±-C, 

K= (ya"kb, rl'xb) = (g~ (kbxx 
a) , g~ (kaxxb) ) eFxF 

[0 0 11] flH5«2t-Ji&«fc-3fc > H^W^H^Lfe 



(5) 



EfB8 2 0 0 1—3 5 2 3 1 9 



[0 0 12] 

»*SC, «###55, •fe&Srttt, **fc»LT a W 

■naja^ftsicssn^-js: o \z , «^©igRffl»±©*i» 

[0013] £fc, a.— Wgat^7fA;<7^-* 

[0014] *%mt, ^<DV&m\\z&tt%mm&$M 

[0 0 15] 

M&-tZ>tz&>, Hf#SClt?tt, Fl, F2£hfc(Cjj||| 

^ss^nssiEfffcL, gi, g2s*n^n*iB» 

■Fl i -F2©7ckb > -gl, g2ttffi»***i*ftl 
1, 1 2kLT*o*IB»Fl, F2*ffiK a— tfu 
lhu2©«J«fiStt, a-1fultt0<xl<] It 

lOIWaiU IMMxlfcttLT, ^RSi¥Fl±r- 
yl = ffT (xl) £*&£Xt^:7£, *«)feyl 
*SBB«fcU ^Wy 1 ^^>XTA^7^-^t^5 
*P13¥F 1, Tcgl, ffiftl 1 fti— tf u 2 
^ryri, 3.-1fu2tt0<x2<l 2£&£gg(x 
2«r£j5E'f*;*7 i y:7fc l 4jsJLfex2Su2®8«8 
tU «Wlx2fc:»LT i *ESF2±'Cy2 = g2 

(x2) gStoWryrfc, ##>fcy 2 
U ^B8«y 2^2/^^^/^^— ^t?*5*ESF 
2, 5tg2, ffijRl 2*J--1fu ltcmat&XT-v? 
hfrhta*), ^-1fuli:a.-1fu2koWt*H:, , 



^-1f u Hi 0 <k l< 1 2 h&SSLJfek 1 &£*r« 
^ryrt,- £jsRL&kl£/?Hvt, WP£g¥F2JtT-r 
l=g2~ (kl) T^rfc, ^cDaj^rl 

S^-ifu2«c3ligt-^X7 1 ^ri: i J.-ifu 2fc£0< 

k2<n^a«k2g4«mryri, s«- 

lfek2gfflw, WRB§£f l±t?r 2 = g 1 ~ (k 
2) MM^ryrj:, -^CDffi^r 2 fen.— If u 1 \z 
mmtZXTyyti, -jl— tfu Ifcta— ifu2ck!)§<S 
Lfcr 2i:u2©&BB»y 2»tf e#0i§fc?&»x 1M 

K= -(rr (xl) y2" (kl) ) = (gF. . 
(xlxk-2) , g2" (klxx2) ) 6F1XF2 

J--1f u 2 fctn.— if u 1 J; D S« Lfc r 1 £ u 1 ©&&g 

K=(yT (k2) , rl~ (x2)) = (gr 
(x lxk2) , g2^ (k 1 xx 2) ) 6F1XF2 

-a.r-lfu.1 ^^---1fu 2^n^tl©v^^A.. 
F 1 ,. g 1 ,; 1 IMF 2,^2, .1 2.^a 

feMx 1 , x 2 £>^fcH^2-££ 3 iifllK^ 

[ooi6] m&m 2 -ea, e»j&s i E«©«#*rsc& 

[0 0 17] »»H3T?tt, R^S 1 IBKOtt^r^S 
[0 0 1 8].»«3B4Tftt,-|»*3Hi|B«©*IS»F. 

[0 0 19] RScfflStftt^lBSeJHlBiBO^KafF 
1, F 2 *«Btt±©«PJffl«E 1 (F 1 ) , E 2 (F 

2) t-r*ci:s«faitr««»*»i:Lr^*. 

[0 0 2 0] »*H6TI±, H*JH183«©*RB»F . 
1 , F 2 £:&Egf*, «Ktf:±©«Hffl]BF 1 , E 2 (F 
2) t-rsci:*«Fai:-r*«ft*iSi:LTV^. 

[0 0 2 1] if^JB7T-tt, F 1 , F 2 L, 
git g2*^n^n^PIg¥F 1 , F2co^ci:L, g 
1. g2©ffiS$:^nil, 1 2£L, WBSPF 

f 2<Dmwztt>izm&mzmL, *h»fi, f 
2 (Dttmm\z&t&tz>^{&**n?n7c 1, x2t 

U *K«F1, F2, Tcgl, g2, ffijRl 1,12 
ftftJUnyt'jStWL, *«»F1, F2CD7C&A 
AfcU ^cottI, 7r2(cj:^tB^$:tf-^-r^rll@a5^ 
tfu ltt0<x Kl 1 fcs&SSKx 1M 

o <x 2 < 1 2 ^^c^^gcx 2 s«?B»fc Lxmmtz 

^'JBtlfL, WixlC^Lt, #PSPF1±© 
Sf»T?yl=gl^ <x 1) «?B« 
x2CTlt, WRgg¥F2±©iSfi[T*y 2=g2 ^ (x 
2) &#tt£ff!ras&#U ^n^ttCDfcB^y 1 , y2 



(6) 
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TftS#E»F 1, F2,Sgl f g2, ffiftl 1, 1 

2 , mkK i , 7T 2 sffi^.— tf {ca»i-r saieas* 

b, aHfu lfcttbTiWlCSr— *MfcB« bfcvo. 
— Iftti 0<kl<l l»V0<k2<l 2fcftsa» 

ki, k2^i, cti*««-ra^^y»**L, 
mmmF i±x-r i = g i ~ (ki) , ci=yr 

(kl) £, tiSF2±-Cr2 = g2 ~ (k2) , c 
2=y2" (k2) 

C=7T 1 (c 1) ( + ) 7C2 (c 2) ( + ) M 

toi»l«£SU W(rl, r2, c) £5r-# 

£Wb, (r 1, r2, c) *S«b&.a— tfu 

Ite, IBWxlVx2Sffl^T l 
M = tt 1 (rT (xl) ) ( + ) tt2 (r 2 ~ (x 
2) ) (+.) c 

ft*»*j»»ffift*b, *©tB*kbr«*ScM*A* 

b , ^--ifu i # f i < mwammmt f 2 ica 

frdctswafc-rsB^flisaiibrv^a. 

*iifflbfeie.^ss»tbTv^s.. 

[0 0 2 3] tt*JB9^te, tf*S7|2a©77^^ll^ 
-T £ r d V 7 A £IB« b I3^K* hbT^S. 
[00.2.4] MOt 1 Ofli, S*S7f3«©*KS¥F 
l-,"F2**IRi»:i:'r«c:i:*«ai:-r*«MSfls^ai: 
bT^£. ::• 

[0 0 2 5] »3fcB7E*©*flB»F 
1, F 2 £WK#:±cD«RfflSgE 1 (Fl) , E2 (F 

.2) -ii-rs-cifcs^akt- sw^b^is^bTv^s- 
to o 2 6] »*H1 2TI4, lt*B7HB«©*Pll¥F 

I, F-2-S#Kft, WRS»±Offinffl«F 1 , E2 (F 
2) fct-SCfcftWPKfc-rSBt^fls^SSfcb^*. 
[0 0 2 7] »*3Hl-'3t?li, Fl, F2S*ISWi: 

b, -gi, g 2*^n-en^K»F i t F2cD7c£b, 

gl, &2©ffilS«r^n^tll 1, 12fcb, CZX'l 

bicmmmzmis, #ibsfi, f2©^mcm 

t2>Wi£L$:Z:tl?tl7C 1 , 7r2hb, ffiBt©fcTy h»0> 

«hhl, #B»F 1, F2, TCgl, g2, ffilS 

II, 1 2&«*frt** ; EUgB*WU SRSFl, F 
2<Z>7b*Xt)tL, *<Dtc1, 7c2tz&zmjj&iirU* 
2>mn&£&lR<Dty haofift©7c*AAi:b, 

h«cj:*aAstf»-rsa»SB«*b, ^-ifuii^o 

<x Kl 1 ^^-Sitx 1M0<x2<1 2 4: ft* 
H«x2S:*»8i:br««-rs^^UfflJ**b, 1MB 
SxlWlT, *RSFl±0jlW'Cyl=gl " 
(xl) Mtt)«Mffff2:..IMnix2fc:MbT. *RR 



»F2±©8t»T?y 2=&2 ^ (x2) 

ft*U *ft«UDttW;yl, y2^iihl, 

Styl, y 2 i:^TA^7^^t?ft$Siff F 1 , 

F2, 76 S 1, g2, (fi»l 1,12, ^7Tl, 7T 

2, hfcflkx— ifcaBBf ^iiflSIS^b, ^.-if u 1 
^-^MfC-StfbT^ y^m^lbta-fu 
2(CiaiSbfe^^#. 0<kl<llW0<k2<l 
2fcft*SUftkl, k2S:*j58b, ZftSteJlfrrs^ 
USS^b, r-^MWLe-h (M) WPS 
»F l±lf r 1 = g r -(k I)" S, «H«F 2±lf r 
2 = g2 ~ (k2). c l=7Tl (rl) 

(mod 1 1) , c 2=7T 2 (r 2) (mod 1 
2) - v. 

sl = kr.(-l) .{e+xlcl) (mod. 1 
1) 

s 2 = k 2 ~ (— 1 ) (e + x2c2) (mod 1 
2) 

fcfc£0<sl<ll — 1, 0<s2<12-l^ 

to, i - ... ■ " 

0<s<l l.x l 2t^os = s 1 (mod 11) , . 
s = s 2 (mod 12) 

^ftSsSSfe^SSfil, fOffi* (cl, c 
2 , s ) .%T^*MlzM?2>m%X£ Ita-lfu 2 tc 

jas«-r*a«a**b, (ci, c2, s) 

ftbfc^-— 1fu2tt, jl— »fu 1 ©&H«t2W$'y<5 1 A 
e' =h (M) , . 

si' =s (mod 11) , s2' =s (mod 1 
2) 

FUTtT =gr (e'/sl 5 ) yl" (c 1 

/si), 

F2±trr2' = g2~ (e'/s2 , ) y 2* (c2 
/s2), 

c 1* =7Tl (rl' ) , c2' =tt2 (r 2' ) 

c l = c 1' (mod 11) , c2 = c2' (mod 
12) 

tMEt*. ^-VultfFl^a^<IBIBS«iaiBi:F 

[0028] m*m ts#® 1 3 8s«®s*;* 

ffiSJSfflb&»*«E«i: bT^-5, 
[0 0 2 9] R$fi 1 5 -eii, R2HH 1 3IB«gO^^^ 

^fifrarn^AtBBWbfcraRa^fcb-r^a. 
[0030] n*jg 1 6 -ctt, n^n 1 3 mmommm 
Fl, FZt^mtkfc-Tftcktfflflifc-rft*****: 

bTV^*. 

[0031] KftH 1 7 -ci*, gg^jg 1 3 tEmvutm 

Fl, F2«*|Ri«J:CD«nttHEl (Fl) , E2 
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(F2) £?ZZ£*&m£?Z>m%XWi£LX^Z>. 

[o 0 3 2]. mmmi sx\t, mxmi 3mm<zmm 

F 1 , F 2 *mm, WRf*±©#nffl*F 1 , E 2 
(F2) h*ZZ£&mik*Zm%J38itLX^Z. 
[0 0 3 3] 

immmu bib, ^K»±cDSii(*fis^s^^Rffl 

Step l.«WB«« 

step 1 — 1. yXrA/^^-^K 

Fl, E/F2*«IH(»:,-WIEft:±(3D«PJft«, gl,. 

G2m?nFl, E (F 2).©7C, gl, G2<£>{£ 

as^n-enii,. 12, i^-ei iti 2*431^* 

kU.*B*Fi; fSP3ffi*£E (F2) CD*G*fi»fc:g 

tfe-r %2m&*ti*ti7c 1 , tt2, ffijg^tr^ hftcD« 

step 1 — 2 . JL— If u 1 <Z)tt£j^ 

JL-ifu lfc£0<x 1<1 1 ^^^Ifa lM0<x. 

s .2<l-2kft«. .m: v 

■BRx2ftiMJf«kbT*ftttU WMtx-lfcttLT, 
Fl±fyl=gl (xl) , Wix2CTU, 
E (F2) ±XY2 = (x2);G2M«), ^ft^ftCD 
ffl*yl, Y2*&tmt'tZ. 
step 1— 3 . u 1 <£>8t««03iSP 

fiffllyl, Y2t^fA;i7^^t^^Fl ) E 
(F2) , gl, G2, 11, 12, 7T1, ;r2, h£ 

[0 0 3 4] Step 2. ol— *f u 1 tC J^^-^M 

0<k 1<1 12fctf0<k2<l 2fcfc*a»kl, k 
2*£jSU f^MMle = h (M) WPM 
*Fl±trl=gr (kl) t/ttnttE (F 
2) ±tR2 = (k2) G2 JKtc, c 1 =tt 1 

(rl) (mod 11) , c2=tt2 (R2) (mo 
d 12) 

sl=kr (— 1) (e+xlcl) (mod 1 
1) 

s 2 = k 2 ~ (— 1 ) (e+x2c2) (mod 1 
2) 

ift«0<sl<ll-l, 0<s2<12-l« 

0<s<llxl 2^os=s 1 (mod 11), 
s = s 2 (modi 2) 

£fc£s ?<D&t> (cl, c2, s) 

*Mtc#t- LT^-if u 2 KiSfiT*. 
[0035] Step 3. u 2 fC .fca^-^M 

e* =h (M) , 



sT=s (mod 11), s2'=s (mod 1 
2) , 

FUT-rl' =gr.(eVsl' ) yl~ (c 1 
/si), 

E (F2) ±TR2' = (eVs2')G2+(c2 
/s2) Y2, 

c 1* =tt1 (r 1 ' ) , c 2 y =tv2 (R2' ) 

cl=cl' (mod 11) , c2 = c2' (mod 
12) 

[003 6 ] .'±EHEKM 1 tt. »44»46S±BS» 
■o2o©S*»5t*^(cBI#.^.#fc»«*5S^ftoT 

E/F2±<DMWl$mffimizMLX, s t e p 1 {Z&^ 

s t e p 2 fc^^*rp|*©a5fi&««6*t«f <T tit)* 

[0037] mmm ix&, mm»±(Dmmmmmt 

-o X v > * pu^ji;* c n £ rs^^ t.v. - «i « R 
sa, #K»±oiaiisc^s^a, *P3fflja±©«tas*» 
mm**?, &±&<omtez2^&±<Dtt%%i±iz*m 
\zt&&rzzt\z& $ , K^tttaiflif * c t fc^n 

"^©I^^ot^^^ ^tl^eg^, schn 
o r r^&.. Nybe rg-Rueppe-11^^ 

[0 0 3 8] 

imam 2] a 2 a, *Ba«±©KtB^aHJSi:*P3ffl 

Step 1 . «Mitt£ 

step 1—1. jL-tr u 1 <om^m 

^-Ifum, FlS^rlBtt, gl£Fl©7c£U * 
©ffijRl llc^LT, 0<xKllh4^S»xU 
*^L, Fl±fyl = gl ~ (xl) 
ylS&Bi, Mlfexl^ul«I^L, 
Hy 1 ^^fA^7^-^t*5F 1 , Tig 1 , tiffil 
1 l£.a-ifu2fc«»rf S. 
step 1 — 2. 3--*fu2<Dm&f& 
J.-tfu2fc*, E (F2) *#|fi#±<DfgP3ffl«, G2 
*E (F2) ©7ctb f . ^©ffiai 2t:*ru, 0<x2 
<12^*SfiS»x2S^J58b, E (F2) ±TY2 = 
(x2) G2£;£#), *ttfcY2£4yiB», £/«Lfcx 
2£u2<0«Hfi«fcU fiiiY2i:y^f^7^- 
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*Tr;fc£E (F2) , icG2, ffift 1 2Sa-1fult 

[0039] Step 2. jl— if u 1 fc i— *f u 2 t 

step 2— 1 . J.— ifu KDS&m 
iHfulttO<kl<l 2fc«C5SLRk 1*£jSL, 
E (F2) ±f Rl = (kl) G2$*«), *<D&t)R 

it*— !fu2taMrr*. 

step 2 — 2. ^z. — +P u 2 ©Mi! 

•a— tfu 2 tt 0 < k 2 < 1 lfc*e.6&»k2££jsftu 

F l±TT2.= g 1 " (k2).»», ^©tB*r2S 

step 2—3 . jl— if u 1 (Dm&tiHHm 

^.-if u i lia-ifu 2J;»)Slb&r.2tu2 ©&&§ 

®y2^ife^©a?esix iMiyikisfflw, 

K=(r2~(xl), (kl) Y2) = (gl ~ ( X 
lxk2) , (k l Xx 2) G2) eF.lxE (F2) 

step 2—4 . j.— if u 2 ©StJt^iJyg 

•3-Mf u 2 fct^ifu 1 iiJSiUr Uul ©^H 

^y lsva^cMUx 2^vastk 2 sfflii-r, 

K= (y 1 ~ (k2) , (x2) Rl) = (gl" ( x 
lxk2) , (k 1 xx 2) G2) eF 1 xE (F2) 

[0040] jjemam 2 «2%sttt 

fei:fco-tU&. o^tj^o:— if«, ^-Jx-etvtRlttF 

1 ±<t>ffimmm&tmpim&E/F 2 ±©«ft**&ia 

SC^f UT. s t e p 1 t^lvr, if©fiJffl-T5 

»±-csraaf:»aFa©^T*»i:ic^L % step 

£fiJc-r S i£>^^C < jB#*r # nrtgiCfc +) , Ji— if ©#J<H4 
^EfettrixS. <S«c:-*©j.-if©^o^ 



J.— ifC^'sCT-Sfen-SCtAWBgfc^t), 

[0041] $mm2T-i*, mm#±e>mmtmm£ 

[0 0 4 2] 

»C*<r-.rtt, ft*«2-CjlifeJ:-5fc:* .3.— STBTJGaus, 
[0043] *IBI8tt, C0%^££l;*«njgbft&E 

[0H©fB!#&iSHI§] 

ISLLI aas« 1 ©s=s^a©«^s 

[ill ^SS^J2ffl||^SB©«fi£0 

lajLl Se*«yiffl«P3ffliS±fflpSAS«ffl«J5£E. 
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mi ] 



i m2 ] 



!f ul 



Stept. fej^RJt 



Stepl-1. 



StepJ-2. 



Stepl-3. . 



Step2. M ^<D 



(PI, gl. II) 

(B/F2, G2, 12) 
(itl, %2,h) 



(yi.Y2) 



M, Cel. C2, s) 




[ Mi l 



[ H4 ] 



Ya^taG 



M, (cl. s) 
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